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Foreword 

This translation has been made based on the original Japanese Indus- 
trial Standard established by the Minister of Health, Labour and Wel- 
fare and the Minister of Economy, Trade and Industry through delibera^ 
tions at the Japanese Industrial Standards Committee according to the 
proposal of establishing a Japanese Industrial Standard from The Japan 
Machinery Federation (JMF) with a draft being attached^ based on the 
provision of Article 12 Clause 1 of the Industrial Standardization Law. 
This JIS document is protected by the Copyright Law. 
Attention is drawn to the possibility that some parts of this Standard 
may conflict with a patent right, application for a patent after opening 
to the public, utility model right or application for registration of utility 
model after opening to the public which have technical properties. The 
relevant Ministers and the Japanese Industrial Standards Committee 
are not responsible for identifying the patent right, application for a 
patent after opening to the public, utility model right or application for 
registration of utility model after opening to the public which have the 
said technical properties. 
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JAPANESE INDUSTRIAL STANDARD JIS B 9712 : 2006 

(ISO 13851 : 2002) 

Safety of machinery-Two-hand control 
devices-Functional aspects and design principles 



Iiitroductioii 

This Japanese Industrial Standard has been prepared based on the first edition of ISO 
13851 Safety of machinery— Two-hand control devices— Functional aspects and design 
principles ^n\A\B]\Qd in 2002 without modifying the technical contents. 

1 Scope 

This Standard specifies the safety requirements of a twoTiand control device and the 
dependency of the output signal from the input signals. 

This Standard describes the main characteristics of two"hand control devices for the 
achievement of safety and sets out combinations of functional characteristics for three 
types. It does not apply to devices intended to be used as enabling devices, as 
hold-to-run devices or as special control devices. 

This Standard does not specify with which machines two-hand control devices shall 
be used. It also does not specify which types of two-hand-control device shall be used. 
Moreover, it does not specify the distance between the two-hand control device and the 
danger zone (see 9.8). 

This Standard provides requirements and guidance on the design and selection 
(based on a risk assessment) of two-hand control devices including their assessment, 
the prevention of defeat and the avoidance of faults. It also provides requirements and 
guidance for two-hand control devices containing a programmable electronic system 
(see clause 7). 

This Standard applies to all two-hand control devices, independent of the energy 
used, including' 

— two-hand control devices which are or are not integral parts of a machine; 

— two-hand control devices which consist of one or more than one separate element. 
NOTE: The International Standard corresponding to JIS B 9712 is as follows. 

ISO 13851^2002 Safety of machinery-Two'hand control devices-Functional 
aspects and design principles (IDT) 

In addition, symbol w^hich denote the degree of correspondence in the 
contents between the relevant International Standard and JIS are IDT 
(identical), MOD (modified), NEQ (not equivalent) according to ISO/IEC 
Guide 21. 

2 Normative references 

The following standards contain provisions which, through reference in this text, 
constitute provisions of this Standard. If the indication of the year is given to referred 
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standard, only the edition of indicated year constitutes the provision of this Standard 
but the revision and amendment made thereafter do not apply. The normative refer- 
ences without the indication of the j'car apply only to the most recent editions (includ- 
ing amendments). 

JIS B 9700-1^2004 Safety of machinery-Basic concepts, general principles for de- 
sign-Part 1- Basic terminology^ methodology 

NOTE: Corresponding International Standard: ISO 12100-1: 2003 Safety of 
machinery-Basic concepts, general principles for design-Part 1' Basic 
terminology, methodology (IBT) 

JIS B 9700-2:2004 Safety of machinery-Basic concepts, general principles for de- 
sign-Part 2' Technical principles 

NOTE: Corresponding International Standard: ISO 12100*2: 2003 Safety of 
machinery— Basic concepts, general principles for design-Part 2- Technical 
principles (IDT) 

JIS B 9705-1:2000 Safety of machinery-Safetyrelated parts of control systems-Part 1' 
General principles for design 

NOTE: Corresponding International Standard: ISO 13849-1: 1999 Safety of 
machinery-Safety-related parts of control systems-Part 1' General 
prrnciples for design (IDT) 

JIS B 9960"l:l999 Safety of machinery-Electrical equipment of machines-Part 1- Gen- 
eral req uiremen ts 

NOTE: Correspondnig International Standard: ISO 60204-1: 1997 Safety of 
machinery-Electrical equipment of machines-Part 1- General requirements 
(MOD) 

JIS B 9715:2006 Safety of machinery— Positioning of protective equipment with respect 
to the approach speeds of parts of the human body 

NOTE: Corresponding International Standard: ISO 13855: 2002 Safety of 
machinery— Positioning of protective equipment with respect to the 
approach speeds of parts of the human body(JT)'\:) 

3 Terms and definitions 

For the purposes of this Standard, the following terms and definitions apply. 

3.1 two"hand control device 

a device which requires at least simultaneous actuation by the use of both hands in 
order to initiate and to maintain, whilst a hazardous condition exists, any operation of 
a machine thus affording a measure of protection only for the person who actuates it 
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6 
Key 

1 Input signal 

2 Two -hand control device 

3 Control actuating- device 

4 Signal converter(s) 

Figure 1 Schematic representation of a two-hand control device 



5 Signal processor (s) 

6 Output signal 

7 Logic unit 



3.2 input signal 

the externally actuated signal applied by hand to a control-actuating device (see fig- 
ure l) 

3.3 control actuating device 

a component of the two-hand control device which senses an input signal from one 
hand and transmits it to a signal converter (see figure l) 

3.4 simultaneous actuation 

the continuing actuation of both control actuating devices during the same time pe- 
riod, whatever the time lag is between the start of one input signal and the start of the 
other (see figure 2) 

3.5 synchronous actuation 

a particular case of simultaneous actuation w^here the time lag between the start of 
one input signal and the start of the other is less than or equal to 0.5 s (see figure 3) 

3.6 signal converter 

a component of the two-hand control device which receives an input signal from a 
control actuating device and which transmits and/or converts this signal into a form 
acceptable to the signal processor (see figure l) 

3.7 signal processor 

a part of the tw^o-hand control device which generates the output signal as a conse- 
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quence of the two input signals (see figure l) 

3.8 output signal 

the signal generated by the two~hand control device to be fed into the machinery to 
be controlled, and which is based on one pair of input signals (see figure 1) 

3.9 response time 

the time between the release of a control actuating device and the cessation of the 
output signal (see also 9.8) 

3.10 mobile two-hand control device 

a device which can be moved and used in more than one definable position relative to 
the danger zone of the machine which it controls 

4 Types of two"hand control device and their selection 

Table 1 defines three types of two-hand control device. It sets out the functional 
characteristics and the minimum measures for the safety of each type of two-hand con- 
trol device in this Standard. AH two-hand control devices shall comply wdth JIS B 
9700-1, JIS B 9700-2 and JIS B 9960-1, 

Table 1 List of types of two"hand control device and minimum safety requirements 



Requirements 


Subclause 


Type 


I 


11 


111 


A 


B 


c 


Use of both hands (siraultaneons actuation) 


5.1 


X 


X 


X 


X 


^ 


Relationship between input signals and output signal 


5-2 


X 


X 


X 


X 


X 


Cessation of the output signal 


5.3 


X 


X 


X 


X 


X 


Prevention of accidental operation 


5.4 


X 


X 


X 


X 


X 


I^revention of defeat 


5.5 


X 


X 


X 


X 


X 


Re-iniiiation of the output siy^nal 


5.G 


y) 


X 


X 


X 


X 


Sy nchro no us a.c tu a t io ri 


5.7 






X 


X 


X 


Use of category 1 (see JIS B 9705-1:2000) 


6.2 


X 




X 






Use of category 3 (see JIS B 9705-l;2000) 


6.3 




X 




X 




Use of category 4 (see JIS B 9705-1:2000) 


G.4 










X 


Apply items with the symbol x. 














Note ■'' For the selection of type I, see 8.6. 















The selection and the design of the type (see table l) of two-hand control device will 
depend on 

- the hazard(s) present.; 
" the risk assessment; 

- experience in use of the technology; 

- other factors, which shall be specified for each application [e.g. the prevention of 
accidental actuation and of defeat (see clause 8), as well as other conditions (see JIS 
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B 9700-1:2004, clause 4)]. 



NOTE*- Guidance on risk assessment may be found in JIS B 9700-1 and detailed 
guidance is given in JIS B 9702. 

5 Characteristics of safety functions 

The characteristics of safety functions described in 5.1 to 5.7 shall be included, in 
two'hand control devices in accordance with table 1. 

5.1 Use of both hands (simultaneous actuation) 

The two-hand control device shall be designed so that the operator must use both 
hands during the same time period, one hand on each control" actuating device, to op- 
erate the two- hand control device. This is simultaneous actuation and is independent 
of any time lag between the initiation of each of the two input signals (see figure 2). 
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First hand 

Second hand 

Initiation of first input signal 

Initiation of second input signal 



5 Cessation of input signals 

6 Time lag undefined, simultaneous actuation 

7 Time j^eriod of smiultaneous actuation 



Figure 2 Input signals in the case of simultaneous actuation 

5.2 Relationship between input signals and output signal 

The input signals applied to each of the two control actuating devices shall together 
initiate and maintain the output signal from the two-hand control device only so long 
as both input signals are applied. The form of the output signal (e.g. number of chan- 
nels, pulse, shape, etc.) may vary depending on the design requirements in each case. 
It shall always be regarded as, and shall be identified as, a single output signal by the 
machine control circuit. 

5 . 3 Cessation of the outp ut signal 

The release of either one or both control actuating devices shall initiate the cessation 
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of the output signal. 

5.4 Prevention of accidental operation 

The probability of operating the control actuating devices accidentally^ shall be mini- 
mized (see clauses 8 and 9). 

5.5 Prevention of defeat 

The protective effect of the two-hand control device shall not be easily defeated (see 
clauses 8 and 9). 

5.6 Re-initiation of the output signal 

The re-initiation of the output signal shall only be possible after the release of both 
control actuating devices. 

5.7 Synchronous actuation 

5.7.1 An output signal shall be generated only when both control actuating devices 
are actuated in a time lag which is less than or equal to 0.5 s (see figure 3). 
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1 First liand 

2 Second hand 

3 Initiation of first input signal 

4 Initiation of second input signal 

Figure 3 Input signals in the case of synchronous actuation 



5 Cessation of input signals 

6 Time lag ^0.5 s, synchroiious actuation 

7 Time period of simultaneous actuation 



5.7.2 Mechanical two'hand control devices shall only generate an output signal by 
satisfying particular spatial requirements for the travel of both of the control actuating 
devices. 

5.7.3 If the control actuating devices are not actuated synchronously, the output sig- 
nal shall be prevented and it shall be necessary to release both control actuating de- 
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vices and to re-apply both input signals. 

NOTE* Where two or more two-hand control devicevS are used to operate one ma- 
chine, synchronous actuation is required only within each two-hand control 
device and is not required between devices. 

6 Requirements related to categories of control 

6.1 Category selection 

The behaviour of parts of a two-hand control device in the case of failure shall be in 
accordance with the selected category of JIS B 9705-1^2000 (see table 2). 

The category of control of two-hand control devices shall not be less than the cate- 
gory of control of the relevant safety related part of the machine control system (see 
JIS B 9705-1:2000). 

Annex B describes the relationship between the types of twoTiand control devices 
and the categories according to JIS B 9705-1:2000. 

6.2 Use of category 1 

Well-tried safety components and safety principles in accordance with, at least, cate- 
gory 1 of JIS B 9705-1:2000 shall be used in t3^pe I and type ILIA two-hand control de^ 
vices. 

NOTE: In order to achieve high reliability and high availability, it is recommended 
that well-tried safety components and safety principles be used in all types 
of tw^o-hand control device. 

6.3 Use of category 3 

6.3.1 When the risk assessment indicates the requirement for single-fault safety, 
type II and type IIIB two-hand control devices shall comply w^ith category 3 (JIS B 
9705-1:2000) and with 6.3.2, 6.3.3 and 6.3,4. 

6.3.2 A single fault in the two-hand control shall not lead to the loss of the safety func- 
tion (s). 

6.3.3 The two -hand control device shall not be converted into a one -hand control device 
as a consequence of a single fault. 

6.3.4 An output signal shall not be generated as a consequence of a single fault. 

NOTE These requirements do not mean that all faults will be detected. Conse- 
quently, the accumulation of undetected faults may lead to the loss of the 
safety function and to an unintended output of the two-hand control de- 
vice. 
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6.4 Use of category 4 

6.4.1 When the risk assessment indicates the requirements for automatic monitoring, 
the type IIIC two-hand control device shall comply with category 4 (JIS B 9705" 1-2000), 
with 6.3 and with 6.4.2, 6.4.3 and 6.4.4. 

6.4.2 A single fault shall he detected at or before the next operation of the safety func- 
tion(s). 

6.4.3 After the occurrence of a single fault, it shall not be possible to re-initiate the out- 
put signal. 

6.4.4 An output signal being generated at the time of occurrence of a single fault may 
continue, but shall cease when either one or both input signals are terminated. If a sin- 
gle fault cannot be detected, then a combination of faults shall not lead to a loss of the 
safety function(s), 

7 Use of programmable electronic systems 

Where a programmable electronic system (PES) is used to achieve the functional 
characteristics of a tw^o'hand control device, the safety requirements of the hardware 
and in the software of the PES shall be validated in accordance with the risk assess- 
ment. 

Secure means shall be provided for the software and the hardware of the PES to en- 
sure that the designed functional characteristics cannot be tampered with. 

The output signal of type IIIB and type IIIC two-hand control devices shall not be 
generated and transferred solely by a single -channel PES to the machine control sys- 
tem. 

NOTE* There is still considerable development in the ways in which programma- 
ble electronic systems are being validated, and a list of documents which 
provide guidance in this subject area is given in Bibliography, 

8 Prevention of accidental actuation and of defeat 

8.1 Common considerations 

The control actuating devices of a two-hand control device shall be designed and ar- 
ranged in such a way that the protective effect of the two-hand control device cannot be 
easily defeated and that the probability of accidental actuation is minimized, in accor- 
dance with the risk assessment for the particular application. 

The use of one hand alone, the use of possible combinations of one hand and/or other 
parts of the body and/or the use of simple aids which allow^ defeat shall all be consid- 
ered, so that it shall not be possible to reach into the danger zone during a hazardous 
situation. x\ccidental actuation (e.g. by the clothes of the operator) shall be considered 
in the same way. 
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Siinple aids can be e.g. bridges, cords or tapes. The selection of dissimilar actuating 
directions, covers, shapes, etc., shall minimize the possibilities of defeat. The possibil- 
ity of a twohand control device being operated by two persons, thus leaving two hands 
free, can be overcome by using synchronous actuation. 

NOTE- Total protection from "defeat" is not possible. 

8.2 to 8.6 show some separate individual ways in which defeat is possible, together 
with some precautionary measures for prevention. The methods of defeat that shall be 
considered, will depend upon the design of the two-hand control device, the operating 
conditions, the method of attachment and positioning of the two-hand control device 
and the specified safety distance requirements, etc. 

8.7 shows some ways of preventing accidental actuation. 

The precautionary measures listed ma^^ be required singly or in combination to meet 
this Standard. The test procedures which shall be applied to the most common types of 
design are set out in 10.5. For other designs of two-hand control device, these test pro- 
cedures may or may not be applicable. In these cases, a hazard analysis and an as- 
sessment of the risk of the possible use and/or misuse of that design of tw^o-hand con- 
trol device shall be carried out and appropriate measures shall be taken to comply with 
this Standard. 

8.2 Prevention of defeat using one hand 

Measures to prevent defeat by using one hand shall be provided. Examples of suit- 
able measures are- 

- separation of the control actuating devices by at leavst 260 mm (internal dimension); 

- the provision of one or more shields or an elevated area between the control actuat- 
ing devices, designed in such a way that the control actuating devices are separated 
by a distance of at least 260 mm around the shields. 

8.3 Prevention of defeat using the hand and elbow of the same arm 

Measures to prevent defeat by using the hand and elbow of the same arm shall be 
provided. Examples of suitable measures are- 

- separation of the control actuating devices by at least 550 mm (internal dimension). 
For ergonomic reasons, this distance should not exceed 600 mm; 

- the provision of one or more shields or an elevated area between the control actuat- 
ing devices, designed in such a way that the control actuating devices cannot be 
touched by the elbow and the tips of the fingers of the same arm at the same time; 

- the provision of covers designed in such a way that the control actuating devices 
cannot be operated by the elbow; 

- the use of control actuating devices with different types and/or directions of opera- 
tion. 
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8.4 Prevention of defeat using the forearm(s) or elbow (s) 

Measures to prevent defeat by using the forearm(s) and/or elbow(s) vShall be provided, 
if the distance of the hands from the hazard as a result of using forearm(s) and/or el- 
bowls) is smaller than the required safety distance. 

A suitable measure is using covers and/or collars which are designed so that the con- 
trol actuating devices cannot be operated by the forearm(s) and/or the elbow(s). 

8.5 Prevention of defeat using one hand and any other part of the body (e.g. knee, 
hip) 

Measures to prevent defeat by using other parts of the body in conjunction with one 
hand shall be provided. Examples of suitable measures are* 

- Arrangement of the control actuating devices on a horizontal or nearly horizontal 
surface which is at least 1 100 mm above the floor or level of access. This is in- 
tended to prevent actuation by the hip. 

- In the case of attachment to a vertical or near vertical surface, the provision of a 
protective collar around the control actuating devices. 

~ The provision of covers and/or shields which are designed in such a w^ay that the 
control actuating devices cannot be operated by one hand and any other part of the 
body. 

8.6 Prevention of defeat by blocking one control actuating device 

Measures to prevent defeat by blocking one actuating device shall be provided. 

This method of defeat causes a two'hand control device to become a one-hand control 
and may cause a permanent input signal to be generated by the blocked actuating de- 
vice. This consequently may allow the output signal of the tw^o-hand control device to 
be generated by using only one hand. Suitable measures to prevent this method of de- 
feat are" 

- To prevent re-initiation of the output signal for further operation by one hand, it 
shall be necessary to include the characteristic of re-initiation in the design of the 
two-hand control device (see 5.6). 

- To prevent the first start by one hand, it shall be necessary to include the charac- 
teristic of synchronous operation in the design of the tw^o-hand control device (see 

5.7). 

NOTE- Whenever the selection of a type 1 two-hand control device is being consid- 
ered, it is important to carry out the risk assessment carefully to deter- 
mine whether the characteristics of synchronous operation and of 
re-initiation can be neglected. 

8.7 Accidental actuation 

The probability of accidental actuation of a two-hand control device shall be mini- 
mized. 
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The measures given in 8.2 to 8.6 will help to minimize accidental actuation. Other 
suitable measures to prevent accidental actuation are^ 

- For mechanical control actuating devices, the need for deliberate actuation with 
respect to the force and the travel required. 

- For non,-mechanical control actuating devices (e.g. photoelectric devices, capacitive 
devices), the need for sensitivity levels which will only allow deliberate actuation . 

9 General requirements 

9 . 1 Ergonomic requirements 

There will sometimes be a conflict between good ergonomic principles (see EN 894" 3) 
and the design of a two-hand control device in order to prevent defeat or accidental ac- 
tuation (e.g. the size of openings and the need to wear gloves for certain operations). 

Means and measures to achieve safety need to reflect the balance between 

- the need to follow good ergonomic principles, and 

- the need to provide measures to prevent defeat and accidental actuation. 
The balance shall provide adequate safety for the particular risk. 

9.2 Operating conditions and environmental influences 

The parts of a tw^o'liand control device shall be selected, installed and linked to- 
gether in such a way that they withstand the operating stresses to be expected and ful- 
fil the requirements of the relevant standards concerning such stresses (e.g. with re- 
gard to switching capacity and sw^itching frequency) as well as the requirements of the 
relevant standards dealing wath the environmental influences to be expected (e.g. vi- 
bration, impact, temperature, foreign bodies, moisture, oil and electromagnetic fields). 

9.3 Enclosures 

9.3.1 Enclosures and their mountings shall be designed to withstand the expected 
operating and ambient stresses. 

9.3.2 Corners, edges, etc., shall be rounded or bevelled so as to avoid injurj^ 

9.3.3 Covers and parts which are intended to be removed or opened shall be con- 
structed so that they can only be removed or opened with the aid of a tool. Fasteners 
shall be of the captive type. 

9.3.4 When enclosures are mounted on stands, the stands shall be provided with fa- 
cilities for secure mounting to the enclosures and to the floor. 
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9.3.5 Enclosures shall be mounted and positioned so that the operator, after releasing 
an actuator, cannot reach the danger zone during the hazardous situation (see 9.8 and 

12.2). 

9.3.6 If the enclosure supporting the control actuating devices is adjustable, it shall 
be provided with means for locking it in position (for mobile two-hand control devices, 
see 9.7). 

9.4 Selection, design and installation of control actuating devices 

9.4.1 Control actuating devices shall be selected, designed, arranged and installed in 
such a wa}' that they can be actuated without undue fatigue (e.g. as a result of awk- 
ward posture, unsuitable movements or high operating forces) (see EN 894-3). 

9.4.2 Control actuating devices shall not be red. 

NOTE: For electrical two-hand control devices, see also dIS B 9960-1:1999. 

9.4.3 Control actuating devices shall not form any crushing or shearing points w^ith 
any other parts. 

9.4.4 The two-hand control device, the relevant machine control system and their in- 
terconnection(s) shall be designed to corresponding categories as specified in JIS B 
9705-1:2000. 

9.5 Prevention of unintended output signals by acceleration forces 

Foreseeable forces caused by acceleration imparted to the two-hand control device 
shall not cause an output signal (e.g. falling over, accidental impact or shockloading). 

9.6 Unintended operation of mobile and portable hand-held machines 

9.6.1 A two-hand control device shall be designed to prevent its unintended operation 
due to the normal handling of the mobile and/or portable hand-held machine which it 
controls. 

9.6.2 A tw^o-hand control device shall be designed so that separate and dissimilar ac- 
tions of the control actuating devices are required to give the input signal to start the 
dangerous motion of the machine. 

NOTES 1 The provision of the two control actuating devices in separate handles 
will not satisfy this requirement unless their method of operation is 
different. 

2 The provision of an automatic lock-out facility on one of the control ac- 
tuating devices provides a higher level of protection. 
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9.7 Mobile two- hand control devices 

9.7.1 The actuators of a mohile two-hand control device, and their supporting enclo- 
sure, shall be stable in normal use (see JIS B 9700-2). 

NOTE- This may be fulfilled by including a large mass or any other suitable 
means. 

9.7.2 Mobile two-hand control devices shall be provided w4th means to prevent move- 
ment when being operated. 

NOTE' This may be fulfilled by including a large mass, use of lockable wheels or 
any other suitable means. 

9.7.3 Facilities shall be available for maintaining and checking the required safety 
distance between the control actuating devices and the danger zone (see 9.8 and 12.2) 
(e.g. by means of a distance ring-see figure 4). 




Key 

1 Distance ring 

Figure 4 Example of a mobile twohand control device with a distance ring 

9.7.4 Pipes, cables and connections shall be protected against damage using the con- 
siderations presented in 9.2 and 9.4.4. 

9.8 Safety distance 

To calculate the required safety distance (referred to as the minimum distance in JIS 
B 9715-2006) between the control actuating devices and the danger zone, the following 
shall be taken into account' 

- the hand/arm speed (see JIS B 9715:2006); 

- the shape and arrangement of the tw^o-hand control device; 

- the response time of the two"hand control device; 
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- the maximum time taken to stop the machine, or remove the hazard, following ces- 
sation of the output signal of the two-hand control, device^ 

- the intended use of the machine (see JIS B 9700-1:2004); 

- relevant type C standards. 

10 Verification 

10. 1 General requirements for verification 

The requirements specified for a two-hand control device, as identified by the risk 
assessment, shall be verified by theoretical assessment of the design and by practical 
tests. A summary of the verification procedures is given in table 2. These procedures 
are intended to verify the safety requirements of the two-hand control device, including 
its functional characteristics. 

Table 2 Verification procedure 



Clause 


Safety requireniGnts 


Procedure 


Remarks 


Visual 

inspection 


Performance 
check 


Measurement 


General 


9.2 


Operating conditions and 
environmental influences 




X 


X 


Apply relevant standards 


9.3 


Requirements on enclosures 


X. 


X 




By type testing 


9.4 


Selection, design and installation 
of control actuating devices 


X 


X 


X 




9.5 


Unintended output signal caused 
by acceleration forces 




X 


X 




9.6 


Unintended control actuation 


X 


X 




For mobile and portable 
handheld machines 


9.7 


Stability 




X 




Por mobile two-hand control 
dev.ices 


9.8 


Response time 






X 




11 


Marking 


X 








F unctional characteristics 


5.1 


Use of both hands 


X 


X 






5.2 


Relationship input/output signal 




X 






5.3 


Cessation of output signal 




X 






5.4 


Accide ntal operation 


.X 


X 


X 


Use the methods of clause 8 


5.5 


Defeating 


X 


X 


X 


By applying 10.5 


5.6 


Re -initiation 




X 




Resetting check 


5.7 


Synclir ono us operation 
Category of control 




X 


>c: 




6.2 


Category 1 


X 






By identification 


6.3 


Catej?ory 3 




X 


X 


Fault simulation (see 10.3) 


6.4 


Catej^ory 4 




X 


X 


Fault simulation (see 10.3) 


Apply items with the symbol x . 



The verification procedures concern exclusively the twodiand control device itself 
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and do not take into consideration the possible effect of the control system of the ma- 
chinery to which the two'hand control device is connected. Feedback signal(s) from the 
machine control system which might eventually be required by the design of the 
two-hand control device shall be simulated. 

The verification procedures that shall be considered will depend upon the design of 
the two-hand control device, the type of two-hand control device, the operating condi- 
tions, the method of attachment and positioning of the two -hand control device and the 
specific safety distance requirement, etc. These verification procedures include visual 
inspection, performance checking, measurement and theoretical assessment. This 
Standard gives some guidance on test procedures, in particular on "prevention of de- 
feat", but it does not specify detailed test methodologies. 

The designer and/or the manufacturer shall arrange for the two-hand control device 
to be verified and/or type-tested so as to demonstrate that the device conforms to the 
design specifications. 

The requirements of these specifications may be given in standards (e.g. JIS B 
9960" 1*1999) or by the designer where no standard exists. 

10.2 Visual inspection 

Visual inspection is to verify the features required for the specific type of two-hand 
control device just by physical examination and shall be applied to the items listed in 
table 2, 

Any components used as welhtried components shall be specifically identified by the 
manufacturer. 

10.3 Performance check 

Performance checking is to verify the features required for the specific type of 
two-hand control device operation. The fault simulation is based on the fault analysis 
of the two-hand control device design. It includes simulation of all safety-related faults 
for type IL type IIIB and type IlIC (see table 1 and table 2). 

10.4 Measurement 

Measurement is to verify figiu^es, binary signals, mechanical features, times, etc., 
specified by the designer to meet the requirements of this Standard. 

10.5 Prevention of defeat 

Measurement tests for the prevention of defeat are given in Annex A. 

For the most common types of design, some or all of the measurement tests shall be 
applied (see also clause 8). The intended use and the shape of the two- hand control de- 
vice will indicate which of the measurement tests in Annex A are necessary since some 
of the measurement tests are contained within others and some are complementary. 

These combinations of tests are intended to prevent defeat by using one hand only 
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and also defeat by using one hand and the elbow, the knee, the hip, the thigh or the 
stomach. 

1 1 Marking 

11.1 The requirements laid down in JIS B 9700-2:2004, 6.4 shall be followed. 

11.2 A two-hand control device comptying with this Standard, and which is not an 
integral part of a machine, shall be labelled clearly and durably with the following de- 
tails : 

— The name and address of the manufacturer and/or responsible supplier. 

— The manufacturer's model or type reference. 

— The manufacturer's serial number and the year of manufacture. 

— The type of two-hand control device in accordance with clause 4 and table 1, and the 
number of this Standard. 

Example 



JIS B 9712:2006: Type IIIC 



~ The response time of the two-hand control device, as defined in 3.9. 

— In the case of electrical two-hand control devices, the appropriate rating informa- 
tion (see JIS B 9960"l:i999). 

- In the case of pneumatic, mechanical and other non-electrical two-hand control de- 
vices, the operating pressure and/or other relevant information. 

11.3 If the two-hand control device consists of two or more separate units, at least one 
unit shall be marked as required in 11.2. These units shall each be marked in such a 
way that the}^ can be identified as parts of the same two-hand control device. 

11.4 In the case of a two-hand control device, complying with this Standard, which is 
an integral part of a machine, at least the type of two-hand control device and the 
number of this Standard shall be marked on the machine. Other instructions and the 
technical data for the two-hand control device shall be given in the machine instruction 
handbook. 

NOTE: This marking may be on the main machine marking plate or close to the 
control actuating devices. 

11.5 Components of two-hand control devices shall be identifiable, if necessary, for 
the purpose of maintenance and/or repair. 

12 Information for installation, use and maintenance 

12. 1 Provision of information 
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The requirements laid down in JIS B 9700-2:2004, 6 shall be followed. 

Information shall be provided by the manufacturer or his authorized representative, 
in the official language(s) of the country in which the machine is to be used, on the in- 
stallation, use and maintenance of the two-hand control device (see JIS B 9700-2:2004, 
clause 6). 

The information may be given in the form of drawings, diagrams, tables and/or writ- 
ten inform a tion. 

12.2 Installation instructions 

Unless the twodiand control device is an integral part of the machine, the following 
information shall be given.: 

- its physical dimensions; 

- the space required for e.g. installation, invspection, maintenance, etc.; 

- mounting details; 

- an explanation as to how to determine the required safety distance (see 9.8); 

- the value of the response time; 

- the properties required, including guidance on selecting categories as specified in 
JIS B 9705-1:2000 for the correct interaction and interconnection betw^een the 
two-hand control device and the relevant safety related part of the machine control 
system; 

" the size and type of supply lines and interconnecting lines (e.g. cables, solid or 
flexible pipes and their recommended arrangement); 

~ details of protective devices (e.g. fuses or pressure-reducing valves); 

- instructions for the initial start'up procedure; 

- adjustment and setting instructions; 

- test procedures to verify that the two-hand control device and the relevant parts of 
the machine control system are operating in the correct manner; 

- details of any limitations on the intended use; 

- details of provisions against foreseeable misuse. 

12.3 Instructions for use 

Instructions shall be given in clear and unambiguous language enabling the 
tw^o-hand control device to be used correctly and safely. 

Pictures, diagrams, symbols and figures shall be used where appropriate. 

The instructions for use shall provide information to verify the correct functioning 
and to enable malfunctions to be recognized. 
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12.4 Maintenance instructions 
The maintenance instructions shall contain- 

- all information necessary for maintenance and repair (where appropriate, the in- 
structions shall include drawings and circuit diagrams); 

- appropriate safety instructions as a part of any schedule for maintenance and/or 
repair; 

- a schedule for systematic maintenance; 

- a parts list; 

- a clear designation of the parts of the two-hand control device in accordance with 
the diagrams, drawings and descriptions. 
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Annex A (normative) 
Measurement test for the prevention of defeat 



This Annex specifies the measurement device for the prevention of defeat, 

A. 1 General 

Measurement tests A. 2 to A. 5 are the tests required in 10.5 to verily the measures 
required in clause 8. Figures A.l to A. 12 are illustrations of the principles given in the 
text for the prevention of defeat and do not represent all the details required for the 
design of a two-hand control device. 

A2 Prevention of defeat using one hand (see 8.2) 

A.2.1 Separation of the control actuating devices by a distance equal to or greater 
than 260 mm (see figure A.l), 

^260 mm 



Figure A.1 Separation by distance 



A. 2. 2 Separation of the control actuating devices by one or more shields or an ele- 
vated area designed in such a way that the control actuating devices cannot be touched 
with the ends of a 260 mm cord representing the finger-span (see figure A. 2). 




Key 

1 Cord 



Figure A.2 Separation by ao elevated area 
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A.2.3 Separation of the control actuation devices by collars and by orientation in such 
a way that the control actuating devices cannot be touched with the ends of a 260 mm 
cord (see figure A. 3). 




Figure A. 3 Separation by collars and by orientation 



A.3 Prevention of defeat using hand and elbow of the same arm (see 8.3) 

A,3.1 Separation of the control actuating devices by a distance equal to or more than 
550 mm (see figure A. 4). 

^550 mm 



^^ 



Figure A.4 Separation by distance 



A.3. 2 Separation of the control actuating devices by the provision of one or more 
shields or an elevated area, designed in such a way that the control actuating devices 
cannot be touched at the same time with both ends of measurement equipment con- 
sisting of a 300 mm rigid bar not exceeding 5 mm in diameter and a 250 mm cord at- 
tached to it. The bar represents the forearm and the cord the hand, and the equipment 
shall be used in all possible operating positions (see figure A. 5). 
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Key 

1 Cord 

2 Bar 



Figure A. 5 Separation by shields 



A.3.3 Separation of control actuating devices by shields which are designed to limit 
access from the operating side and also from the rear in such a way that the control 
actuating devices cannot be operated from the operating side with the tip of a test cone 
representing the elbow (see figure A,6 for method of use). The dimensions of this test 
cone shall be in accordance with figure A. 7. 




Figure A. 6 Use of test cone 




Figure A. 7 Dimensions of test cone 
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A, 3. 4 Control actuating devices with different types and/or directions of operation 
(see figures A. 8 and A.9). 

For the configuration shown in figure A. 8, use both the cord and bar (see figure A. 5) 
and the test cone for the collar (see figures A. 6 and AJ), 

For the configuration shown in figure A..9, use both the cord and bar (see figure A. 5) 
and the test cone for the collar and for the shield (see figures A. 6 and A. 7). 





\. 



Figure A, 8 Separation by collar and by shield 




Figure A.9 Separation by collar, by shield and by orientation 



A.4 Prevention of defeat using the forearni(s) or elbow(s) (see 8.4) 

Shields designed in such a way that the control actuating devices cannot be operated 
b}^ the forearms and/or the elbows (see figure A. 10). 

For the configuration shown in figure A. 10, use the test cone (see figures A.6 and 

A.7). 




Figure A. 10 Separation by shields 
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A,5 Prevention of defeat using the hand and other parts of the body (see 8,5) 

A.5.1 Arrangement of the control actuating devices on a horizontal or nearly hori- 
zontal surface at least 1 100 mm above the floor or level of access (see figure A. 11). 




Figure A. 1 1 Prevention of defeat by position 



A. 5.2 Arrangement of the control actuating devices on a vertical or nearly vertical 
surface with protective collar(s) around the control actuating devices and/or with 
shield(s) (see e.g. figures A.9 and A. 12). 

For the configuration shown in figure A. 12, use both the cord and bar (see figure A. 5) 
and the test cone for the collar (see figures A. 6 and A. 7). 




Figure A. 12 Separation by collars and by position 



A.5.3 Covers and/or shields (see figure A. 10). 
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Annex B (informative) 

Use of categories (in accordance with JIS B 9705"l-2000) in 
types of two"°hand control device 

This Annex is to supplement the matters related to the text and not to constitute the 
provisions of this Standard. 



Ca te gory 


Summary of requirements 
(sec JIS B 9705-1:2000, clause 6) 


Types of two-hand control 
device 


R 


Safetj'-reJ.ated parts of control systems and/or their protect.i\'e 
equipment, as well as their components, shall be designed, constructed, 
selected, assembled and combined in accordance with relevant standards 
so that they can withstand the expected influences. 


— 


1 


The requirements of B shall apply. 

Well-tried ■'^' components and well-tried '^* safety principles shall be used. 


1 and iriA 


2 


The requirements of B and the use of welTtricd ''' componennts and 
safety principles shall apply. 

The safety function shall be checked at suitable intervals by the machine 
control system. 


— 


3 


The requirements of B and the use of well- tried ^^' safety principles shall 

apply 

Safety-related parts shall be designed so that: 

- a single fault in any of these parts does not lead to the loss of the 

safety function; 
whenever reasonably practicable, the single fault is detected. 


"Il and TUB 


'1 


The requirements of B and the use of well- tried''' safety principles shall 

apply. 

Safety-related parts shall be designed so that: 

- a single fault in any of these parts does not lead to the loss of the 

safety function; 
the single fault is detected at or before the next demand upon the 

safety function (if this is not possible, then an accumulation of faults 

shall not lead to the loss of the safety function). 


TTTC 


Note '■* For "well-tried", see JIS B 9705-1: 2000, 6.2.2.2 and 6.2.2.3. 
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